3 ms·

Good thinking, but if I understand correctly, the javascript running the scan is running on your browser. So the scan is coming from the browser process, and bo

Good thinking, but if I understand correctly, the javascript running the scan is running on your browser. So the scan is coming from the browser process, and both sides of the connection have IP address 127.0.0.1. That javascript can then report back, or take other actions in your web session. It's not a port scan in the sense of them opening a socket from their server to your computer.

kstrauser 6y ago
But that report back need not to look exactly like they might expect.
- mr_toad 6y ago
  It’s not impossible. They could be doing something stupid like running eval on a JSON payload, or generating SQL insert statements from the unsanitised data. But I doubt it.